Hi, I have two puppet master with one puppet CA, I was trying to do SRV  
stuff for automatically fine the CA server and master server, but it has 
some problem, please see 
https://groups.google.com/forum/#!topic/puppet-users/fVqxRM-UPRQ for 
details,

so I turns to setting DNS round robin instead, but it has some other 
problem,  I added alt_dns_names = puppetmaster, 
puppetmaster.anim.odw.com.cn in one of my master's puppet.conf, and I redo 
the certificated request process, and sign the certificated with 
--allow-dns-alt-names options, I can read the certificate subjuect 
alternative name:
X509v3 Subject Alternative Name: 
                DNS:puppetmaster, DNS:puppetmater.anim.odw.com.cn, 
DNS:smartpxyfm1.anim.odw.com.cn (smartpxyfm1 is the actual server name)

and then I restart puppet master, and ran puppet agent on a client host, it 
gave me this error that made me very confuse, I added "server = 
puppetmaster" into my client's puppet.conf, and I got:

Warning: Unable to fetch my node definition, but the agent run will 
continue:
Warning: Server hostname 'puppetmaster.anim.odw.com.cn' did not match 
server certificate; expected one of smartpxyfm1.anim.odw.com.cn, 
DNS:puppetmaster, DNS:puppetmater.anim.odw.com.cn, 
DNS:smartpxyfm1.anim.odw.com.cn
Info: Retrieving pluginfacts
Error: /File[/var/lib/puppet/facts.d]: Failed to generate additional 
resources using 'eval_generate': Server hostname 
'puppetmaster.anim.odw.com.cn' did not match server certificate; expected 
one of smartpxyfm1.anim.odw.com.cn, DNS:puppetmaster, 
DNS:puppetmater.anim.odw.com.cn, DNS:smartpxyfm1.anim.odw.com.cn
Error: /File[/var/lib/puppet/facts.d]: Could not evaluate: Could not 
retrieve file metadata for 
puppet://puppetmaster.anim.odw.com.cn/pluginfacts: Server hostname 
'puppetmaster.anim.odw.com.cn' did not match server certificate; expected 
one of smartpxyfm1.anim.odw.com.cn, DNS:puppetmaster, 
DNS:puppetmater.anim.odw.com.cn, DNS:smartpxyfm1.anim.odw.com.cn
Info: Retrieving plugin
Error: /File[/var/lib/puppet/lib]: Failed to generate additional resources 
using 'eval_generate': Server hostname 'puppetmaster.anim.odw.com.cn' did 
not match server certificate; expected one of smartpxyfm1.anim.odw.com.cn, 
DNS:puppetmaster, DNS:puppetmater.anim.odw.com.cn, 
DNS:smartpxyfm1.anim.odw.com.cn
Error: /File[/var/lib/puppet/lib]: Could not evaluate: Could not retrieve 
file metadata for puppet://puppetmaster.anim.odw.com.cn/plugins: Server 
hostname 'puppetmaster.anim.odw.com.cn' did not match server certificate; 
expected one of smartpxyfm1.anim.odw.com.cn, DNS:puppetmaster, 
DNS:puppetmater.anim.odw.com.cn, DNS:smartpxyfm1.anim.odw.com.cn
Info: Loading facts
Could not retrieve fact='printers', resolution='<anonymous>': undefined 
method `captures' for nil:NilClass
Error: Could not retrieve catalog from remote server: Server hostname 
'puppetmaster.anim.odw.com.cn' did not match server certificate; expected 
one of smartpxyfm1.anim.odw.com.cn, DNS:puppetmaster, 
DNS:puppetmater.anim.odw.com.cn, DNS:smartpxyfm1.anim.odw.com.cn
Warning: Not using cache on failed catalog
Error: Could not retrieve catalog; skipping run
Error: Could not send report: Server hostname 
'puppetmaster.anim.odw.com.cn' did not match server certificate; expected 
one of smartpxyfm1.anim.odw.com.cn, DNS:puppetmaster, 
DNS:puppetmater.anim.odw.com.cn, DNS:smartpxyfm1.anim.odw.com.cn


Can someone please help to take a look, much appreciated.

Thanks
-Sinux

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/692a0c29-1e50-44b4-a174-8ebb3a1bd9f4%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to